@xopcai/xopc 0.0.373 → 0.0.375

package/dist/src/tasks/task-main-update-decision-service.js

@@ -1,8 +1,8 @@
 import { TaskRepository, init_task_repository } from "./task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "./task-run-repository.js";
-import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials } from "../providers/model-call.js";
+import { extractAssistantText, getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getPersonalAgentByConversation } from "../personal-agent/repository.js";
 import { TaskCollaborationRepository } from "./task-collaboration-repository.js";
 //#region src/tasks/task-main-update-decision-service.ts

package/dist/src/tui/backends/embedded-backend.js

@@ -8,13 +8,13 @@ import { cancelQueuedSessionInput, claimNextSessionInput, finishSessionInputRun,
 import { appendComposerInputHistory, listComposerInputHistory } from "../../storage/sqlite/composer-input-history-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
+import { init_agent_session_key, resolveAgentIdFromConversationId } from "../../routing/agent-session-key.js";
 import { normalizeAgentId } from "../../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries } from "../../agent/agent-scope.js";
-import { AgentCatalogService } from "../../agent-catalog/service.js";
+import { resolveEffectiveAgentProfile } from "../../config/agent-profile.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { init_paths } from "../../config/paths.js";
-import { init_agent_session_key, resolveAgentIdFromConversationId } from "../../routing/agent-session-key.js";
-import { resolveEffectiveAgentProfile } from "../../config/agent-profile.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { effectiveWorkspacePathForSession } from "../../session/session-workspace.js";
 import { ProjectService } from "../../projects/project-service.js";
 import { inferSuggestedProjectDefaultAgentId } from "../../projects/project-agent-suggestion.js";
@@ -23,6 +23,7 @@ import { buildSessionTimeline } from "../../session/transcript-outline.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
 import { createCreateShareTool, isShareToolAvailable } from "../../agent/tools/create-share-tool.js";
 import { evictEmbeddedSessionRunner } from "../../agent/embedded/session-runner.js";
+import { AgentCatalogService } from "../../agent-catalog/service.js";
 import { SessionIndex } from "../../session/manager.js";
 import "../../session/index.js";
 import { parseModelRef } from "../../agent/models/selection.js";
@@ -31,7 +32,6 @@ import { buildReviewContext, resolveGitRoot } from "../../review/review-git.js";
 import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
 import "../../infra/bus/index.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
 import { buildWorkflowChildTools } from "../../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../../workflows/service/workflow-run-service.js";

package/dist/src/tui/extension-host/load-extensions.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
+import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
 import { loadConfig } from "../../config/loader.js";
-import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
 //#region src/tui/extension-host/load-extensions.ts
 init_paths();

package/dist/src/tui/tui-commands.js

@@ -2,8 +2,8 @@ import { closeXopcDatabase, isXopcDatabaseOpen, openXopcDatabase } from "../stor
 import { TaskRepository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
-import { resolveConfigPath } from "../config/paths.js";
 import { init_agent_session_key, isValidAgentId, normalizeAgentId } from "../routing/agent-session-key.js";
+import { resolveConfigPath } from "../config/paths.js";
 import { init_providers, providerSupportsOAuth } from "../providers/index.js";
 import { ProjectService } from "../projects/project-service.js";
 import { isValidProjectAgentId, normalizeProjectAgentId } from "../projects/project-agent.js";

package/dist/src/tui/tui-skills-autocomplete.js

@@ -1,8 +1,8 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths, resolveBundledSkillsDir } from "../config/paths.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { loadConfig } from "../config/loader.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 //#region src/tui/tui-skills-autocomplete.ts
 init_paths();

package/dist/src/tui/tui-startup-resources.js

@@ -1,12 +1,12 @@
 import { resolveStateDir } from "../config/paths-state.js";
-import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
 import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
+import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
 import { listConnectorInstances } from "../connectors/instances.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";
 import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { basename } from "node:path";
 //#region src/tui/tui-startup-resources.ts

package/dist/src/tui/tui.js

@@ -1,9 +1,9 @@
 import { version } from "../../package.js";
 import { resolveStateDir, resolveXopcDatabasePath } from "../config/paths-state.js";
-import { init_paths } from "../config/paths.js";
 import { init_agent_session_key, normalizeAgentId } from "../routing/agent-session-key.js";
-import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { init_paths } from "../config/paths.js";
+import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
 import { isTerminalWorkflowRunStatus } from "../workflows/domain/run.js";
 import "../workflows/domain/index.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";

package/dist/src/tunnel/broker-client.js

@@ -29,6 +29,8 @@ const registrationResponseSchema = z.object({
 var TunnelBrokerClient = class {
 	constructor(baseUrl) {
 		this.baseUrl = baseUrl;
+		const url = new URL(baseUrl);
+		if (url.protocol !== "https:" || url.username || url.password) throw new Error("Tunnel broker requires HTTPS without URL credentials");
 	}
 	apiUrl(path) {
 		return `${this.baseUrl.replace(/\/+$/, "")}${path.startsWith("/") ? path : `/${path}`}`;

package/dist/src/tunnel/tunnel-config.js

@@ -1,4 +1,4 @@
-import { TunnelConfigSchema, TunnelConsentSchema, init_schema } from "../config/schema.js";
+import { TunnelBrokerUrlSchema, TunnelConfigSchema, TunnelConsentSchema, init_schema } from "../config/schema.js";
 import { getTunnelRegistrationSecretMeta, isMaskedTunnelSecretPatchValue } from "./env.js";
 import { assertTunnelAutoStartAllowed, buildTunnelConsentRecord, hasValidTunnelConsent } from "./consent.js";
 import { z } from "zod";
@@ -6,7 +6,7 @@ import { z } from "zod";
 init_schema();
 const TunnelConfigPatchSchema = z.object({
 	enabled: z.boolean().optional(),
-	brokerUrl: z.string().url().optional(),
+	brokerUrl: TunnelBrokerUrlSchema.optional(),
 	registrationSecret: z.union([z.string(), z.null()]).optional(),
 	autoStart: z.boolean().optional(),
 	subdomain: z.string().optional(),

package/dist/src/tunnel/tunnel-rate-limit.js

@@ -1,9 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { buckets } from "../gateway/rate-limit/buckets.js";
-import "../gateway/rate-limit/index.js";
+import { init_rate_limit } from "../gateway/rate-limit/index.js";
 import { createHash } from "node:crypto";
 //#region src/tunnel/tunnel-rate-limit.ts
+init_rate_limit();
 init_logger();
 const log = createLogger("TunnelRateLimit");
 function tokenKey(token) {

package/dist/src/user-context/access-policy.js

@@ -1,4 +1,5 @@
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
+import { isOwnerIdentity } from "./identity-bindings.js";
 import { init_config, resolveKnowledgeReadPolicy } from "./config.js";
 import { getConversationRouting } from "../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../routing/session-key.js";
@@ -20,7 +21,7 @@ function resolveUserContextSessionAccess(config, conversationId) {
 	};
 	const session = getConversationRouting(conversationId);
 	const mode = getSessionConfig(conversationId)?.userContextMode ?? "enabled";
-	const enabled = Boolean(config.userContext.enabled && session?.peerKind === "direct" && mode === "enabled");
+	const enabled = Boolean(config.userContext.enabled && session?.peerKind === "direct" && isOwnerIdentity(session) && mode === "enabled");
 	return {
 		enabled,
 		userModel: enabled && config.userContext.userModel.enabled,

package/dist/src/user-context/config.d.ts

@@ -115,6 +115,11 @@ export declare const KnowledgeMemoryConfigSchema: z.ZodDefault<z.ZodObject<{
         allow: "allow";
         deny: "deny";
     }>>;
+    learning: z.ZodOptional<z.ZodObject<{
+        idleFlushMs: z.ZodDefault<z.ZodNumber>;
+        maxBatchChars: z.ZodDefault<z.ZodNumber>;
+        maxDailyBatches: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
         project: "project";
         session: "session";
@@ -244,6 +249,11 @@ export declare const UserContextConfigSchema: z.ZodDefault<z.ZodObject<{
             allow: "allow";
             deny: "deny";
         }>>;
+        learning: z.ZodOptional<z.ZodObject<{
+            idleFlushMs: z.ZodDefault<z.ZodNumber>;
+            maxBatchChars: z.ZodDefault<z.ZodNumber>;
+            maxDailyBatches: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
         readScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<{
             project: "project";
             session: "session";

package/dist/src/user-context/config.js

@@ -150,6 +150,11 @@ var init_config = __esmMin((() => {
 	KnowledgeMemoryConfigSchema = z.object({
 		enabled: z.boolean().default(true),
 		writePolicy: z.enum(["deny", "allow"]).default("allow"),
+		learning: z.object({
+			idleFlushMs: z.number().int().min(1e3).max(6e5).default(6e4),
+			maxBatchChars: z.number().int().min(4e3).max(12e4).default(3e4),
+			maxDailyBatches: z.number().int().min(1).max(1e4).default(100)
+		}).strict().optional(),
 		readScopes: z.array(z.enum([
 			"global",
 			"agent",

package/dist/src/user-context/extraction/registry.d.ts

@@ -1,6 +1,6 @@
 import { type ContextExtractionRun } from '../../storage/sqlite/index.js';
 import type { UnderstandingKind } from '../domain.js';
-export type ExtractorId = 'turn-semantics' | 'transcript-synthesis' | 'connector-semantic';
+export type ExtractorId = 'turn-semantics' | 'transcript-synthesis' | 'source-work-synthesis' | 'connector-semantic';
 export type ExtractorDefinition = {
     id: ExtractorId;
     version: string;

package/dist/src/user-context/extraction/registry.js

@@ -15,6 +15,16 @@ const UNDERSTANDING_KINDS = [
 	"derived_insight"
 ];
 const DEFINITIONS = {
+	"source-work-synthesis": {
+		id: "source-work-synthesis",
+		version: "1",
+		inputKinds: ["file", "connector"],
+		requiredProcessingPolicy: "local_only",
+		authorityCeiling: "external_untrusted",
+		candidateKinds: ["project_context", "task_lesson"],
+		maxAutomaticStatus: "active",
+		timeoutMs: 3e4
+	},
 	"turn-semantics": {
 		id: "turn-semantics",
 		version: "1",

package/dist/src/user-context/identity-bindings.d.ts

@@ -0,0 +1,10 @@
+export declare function bindOwnerIdentity(input: {
+    channel: string;
+    accountId: string;
+    peerId: string;
+}): void;
+export declare function isOwnerIdentity(input: {
+    source: string;
+    accountId: string;
+    peerId: string;
+}): boolean;

package/dist/src/user-context/identity-bindings.js

@@ -0,0 +1,24 @@
+import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
+//#region src/user-context/identity-bindings.ts
+init_transaction();
+function bindOwnerIdentity(input) {
+	if (![
+		input.channel,
+		input.accountId,
+		input.peerId
+	].every((value) => value.trim())) throw new Error("Identity fields are required.");
+	getSqliteDatabase().prepare(`INSERT INTO owner_identity_bindings(principal_id, channel, account_id, peer_id, verified_at)
+    VALUES ('local-owner', ?, ?, ?, ?) ON CONFLICT(channel, account_id, peer_id) DO UPDATE
+    SET verified_at = excluded.verified_at, revoked_at = NULL`).run(input.channel, input.accountId, input.peerId, Date.now());
+}
+function isOwnerIdentity(input) {
+	if ([
+		"webchat",
+		"cli",
+		"tui"
+	].includes(input.source)) return true;
+	return Boolean(getSqliteDatabase().prepare(`SELECT 1 FROM owner_identity_bindings
+    WHERE principal_id = 'local-owner' AND channel = ? AND account_id = ? AND peer_id = ? AND revoked_at IS NULL`).get(input.source, input.accountId, input.peerId));
+}
+//#endregion
+export { bindOwnerIdentity, isOwnerIdentity };

package/dist/src/user-context/sources/consent-fields.d.ts

@@ -0,0 +1,2 @@
+/** Restrict source fields before either model processing or searchable chunk persistence. */
+export declare function consentFilteredText(value: string | undefined, allowedFields: Set<string>): string | undefined;

package/dist/src/user-context/sources/consent-fields.js

@@ -0,0 +1,66 @@
+//#region src/user-context/sources/consent-fields.ts
+const FIELD_KEYS = {
+	title: [
+		"title",
+		"subject",
+		"name",
+		"fullName",
+		"repository"
+	],
+	content: [
+		"content",
+		"body",
+		"text",
+		"snippet",
+		"description",
+		"summary"
+	],
+	participants: [
+		"from",
+		"to",
+		"cc",
+		"bcc",
+		"sender",
+		"author",
+		"organizer",
+		"attendees",
+		"participants",
+		"assignee",
+		"owners"
+	],
+	status: [
+		"status",
+		"state",
+		"labels"
+	],
+	timestamps: [
+		"createdAt",
+		"updatedAt",
+		"modifiedAt",
+		"start",
+		"end",
+		"created_at",
+		"updated_at",
+		"modified_at"
+	],
+	owner_activity: [
+		"user",
+		"username",
+		"owner"
+	]
+};
+/** Restrict source fields before either model processing or searchable chunk persistence. */
+function consentFilteredText(value, allowedFields) {
+	if (!value) return;
+	try {
+		const parsed = JSON.parse(value);
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return;
+		const keys = new Set([...allowedFields].flatMap((field) => FIELD_KEYS[field] ?? []));
+		const selected = Object.entries(parsed).filter(([key]) => keys.has(key));
+		return selected.length ? JSON.stringify(Object.fromEntries(selected)) : void 0;
+	} catch {
+		return !/^\s*[\[{]/.test(value) && allowedFields.has("content") ? value : void 0;
+	}
+}
+//#endregion
+export { consentFilteredText };

package/dist/src/user-model/bootstrap.js

@@ -1,6 +1,6 @@
 import { createCollaborationRule, init_collaboration_rule_repository, listCollaborationRules } from "../storage/sqlite/collaboration-rule-repository.js";
-import { reconcileAssertion } from "./repository.js";
 import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals } from "./goals.js";
+import { reconcileAssertion } from "./repository.js";
 import { applyUserProfilePatch } from "./profile.js";
 //#region src/user-model/bootstrap.ts
 init_collaboration_rule_repository();

package/dist/src/user-model/capture/executor.js

@@ -1,7 +1,7 @@
 import { createCollaborationRule, init_collaboration_rule_repository, listCollaborationRules } from "../../storage/sqlite/collaboration-rule-repository.js";
 import { createContextEvidence, init_context_evidence_repository } from "../../storage/sqlite/context-evidence-repository.js";
-import { deleteUserAssertion, getAssertionSlot, getUserAssertion, linkAssertionEvidence, mergeAssertionObservation, reconcileAssertion, setAssertionStatus } from "../repository.js";
 import { createUserGoal, listUserGoals } from "../goals.js";
+import { deleteUserAssertion, getAssertionSlot, getUserAssertion, linkAssertionEvidence, mergeAssertionObservation, reconcileAssertion, setAssertionStatus } from "../repository.js";
 import { createHash } from "node:crypto";
 //#region src/user-model/capture/executor.ts
 init_context_evidence_repository();

package/dist/src/user-model/capture/semantic.d.ts

@@ -1,9 +1,10 @@
+import { type WorkCandidate } from '../../memory-learning/work-capture.js';
 import type { AssertionCandidate } from '../domain.js';
 export declare const USER_MODEL_CAPTURE_INTENTS: readonly ["remember", "query", "confirm", "correct", "forget", "user_assertion", "task", "none"];
 export type UserModelCaptureIntent = typeof USER_MODEL_CAPTURE_INTENTS[number];
 export interface CaptureEvidence {
     ref: string;
-    role: 'user' | 'assistant';
+    role: 'user' | 'assistant' | 'toolResult';
     text: string;
     createdAt: number;
 }
@@ -32,6 +33,7 @@ export interface ParsedCollaborationRuleCandidate {
     evidenceRefs: string[];
 }
 export interface UserModelInterpretation {
+    knowledge?: WorkCandidate[];
     intent: UserModelCaptureIntent;
     assertions: ParsedAssertionOperation[];
     goals?: ParsedGoalCandidate[];

package/dist/src/user-model/capture/semantic.js

@@ -1,3 +1,4 @@
+import { WorkCandidateSchema } from "../../memory-learning/work-capture.js";
 import { z } from "zod";
 //#region src/user-model/capture/semantic.ts
 const USER_MODEL_CAPTURE_INTENTS = [
@@ -30,6 +31,7 @@ const ScopeSchema = z.object({
 	});
 });
 const AssertionOperationSchema = z.object({
+	intent: z.enum(USER_MODEL_CAPTURE_INTENTS).optional(),
 	action: z.enum([
 		"create",
 		"merge",
@@ -122,6 +124,7 @@ const AssertionOperationSchema = z.object({
 	});
 });
 const GroundingSchema = z.object({
+	intent: z.enum(USER_MODEL_CAPTURE_INTENTS).optional(),
 	evidence: z.array(z.object({
 		ref: z.string().min(1),
 		quote: z.string().min(1)
@@ -150,6 +153,7 @@ const CollaborationRuleSchema = z.object({
 	statement: z.string().min(4).max(600)
 }).merge(GroundingSchema).strict();
 const InterpretationSchema = z.object({
+	knowledge: z.array(WorkCandidateSchema).max(8).default([]),
 	intent: z.enum(USER_MODEL_CAPTURE_INTENTS),
 	assertions: z.array(AssertionOperationSchema).max(8),
 	goals: z.array(GoalSchema).max(4).default([]),
@@ -198,7 +202,8 @@ function parseUserModelInterpretation(raw, evidence, allowedTargetIds = []) {
 	]);
 	const allowed = new Set(allowedTargetIds);
 	const assertions = [];
-	if (assertionIntents.has(parsed.intent)) for (const item of parsed.assertions) {
+	for (const item of parsed.assertions) {
+		if (!assertionIntents.has(item.intent ?? parsed.intent)) continue;
 		const evidenceRefs = groundedEvidenceRefs(item, evidenceByRef);
 		if (!evidenceRefs) continue;
 		if (item.action !== "create" && (!item.targetAssertionId || !allowed.has(item.targetAssertionId))) continue;
@@ -214,7 +219,7 @@ function parseUserModelInterpretation(raw, evidence, allowedTargetIds = []) {
 			value: item.value,
 			normalizedValue: item.normalizedValue,
 			statement: item.statement,
-			authority: effectiveAuthority(parsed.intent, item.authority),
+			authority: effectiveAuthority(item.intent ?? parsed.intent, item.authority),
 			confidence: item.confidence,
 			...item.declaredImportance === void 0 ? {} : { declaredImportance: item.declaredImportance },
 			inferredImportance: item.inferredImportance,
@@ -242,7 +247,8 @@ function parseUserModelInterpretation(raw, evidence, allowedTargetIds = []) {
 		"correct",
 		"user_assertion"
 	]);
-	const goals = structuredIntents.has(parsed.intent) ? parsed.goals.flatMap((item) => {
+	const goals = parsed.goals.flatMap((item) => {
+		if (!structuredIntents.has(item.intent ?? parsed.intent)) return [];
 		const evidenceRefs = groundedEvidenceRefs(item, evidenceByRef);
 		if (!evidenceRefs) return [];
 		return [{
@@ -253,8 +259,9 @@ function parseUserModelInterpretation(raw, evidence, allowedTargetIds = []) {
 			...item.targetAt === void 0 ? {} : { targetAt: parseTime(item.targetAt) },
 			evidenceRefs
 		}];
-	}) : [];
-	const collaborationRules = structuredIntents.has(parsed.intent) ? parsed.collaborationRules.flatMap((item) => {
+	});
+	const collaborationRules = parsed.collaborationRules.flatMap((item) => {
+		if (!structuredIntents.has(item.intent ?? parsed.intent)) return [];
 		const evidenceRefs = groundedEvidenceRefs(item, evidenceByRef);
 		if (!evidenceRefs || item.scope.type === "agent") return [];
 		return [{
@@ -265,8 +272,9 @@ function parseUserModelInterpretation(raw, evidence, allowedTargetIds = []) {
 			statement: item.statement,
 			evidenceRefs
 		}];
-	}) : [];
+	});
 	return {
+		knowledge: parsed.knowledge,
 		intent: parsed.intent,
 		assertions,
 		goals,

package/dist/src/user-model/index.js

@@ -1,9 +1,9 @@
 import { PERSONAL_DOMAINS, USER_MODEL_PRINCIPAL_ID, defaultAssertionDomain, defaultAssertionLayer, init_domain, validateCandidate, validateScope } from "./domain.js";
+import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "./goals.js";
 import { defaultReviewAt, isAssertionValidAt, requiresBoundedValidity, resolveCurrentAssertion } from "./temporal.js";
 import { deleteUserAssertion, getActiveAssertionByPredicate, getActiveAssertionForSlot, getAssertionSlot, getUserAssertion, getUserTimezone, linkAssertionEvidence, listSlotAssertions, listUserAssertionSources, listUserAssertions, mergeAssertionObservation, reconcileAssertion, setAssertionStatus, setUserAssertionScope } from "./repository.js";
 import { listActionRuleSuggestions } from "./action-rule-suggestions.js";
 import { calculateExecutionValue } from "./importance.js";
-import { createPriorityWindow, createUserGoal, listPriorityWindows, listUserGoals, setUserGoalStatus, updatePriorityWindow, updateUserGoal } from "./goals.js";
 import { deleteUserModelObservationsForGrant, linkUserAssertions, listUserAssertionEdges, listUserModelObservations, recordUserModelObservation } from "./observation-repository.js";
 import { applyUserProfilePatch, getUserProfileSnapshot } from "./profile.js";
 import { bootstrapUserModel } from "./bootstrap.js";

package/dist/src/user-model/usage-policy.js

@@ -1,9 +1,43 @@
+import { isXopcDatabaseOpen } from "../storage/sqlite/connection.js";
+import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
+import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
+import { init_session_repository } from "../storage/sqlite/session-repository.js";
+import { init_sqlite } from "../storage/sqlite/index.js";
+import { getUnderstandingConsent } from "../user-context/sources/consent-repository.js";
+import { isOwnerIdentity } from "../user-context/identity-bindings.js";
 //#region src/user-model/usage-policy.ts
+init_sqlite();
+init_transaction();
+init_session_repository();
 /** Automatic personalization never grants execution authority. */
 function isWorkingAssumption(assertion) {
 	return (assertion.status === "candidate" || assertion.status === "active") && (assertion.authority === "user_observed" || assertion.authority === "system_inferred") && assertion.confidence >= .7 && (assertion.consequence === "low" || assertion.consequence === "medium") && assertion.sensitivity === "normal" && assertion.disclosurePolicy !== "ask_before_reference";
 }
 function canUseAssertion(assertion, asOf = Date.now(), context = {}) {
+	if (assertion.consentReceiptId) {
+		if (!isXopcDatabaseOpen()) return false;
+		const consent = getUnderstandingConsent(assertion.consentReceiptId);
+		if (!consent || consent.revokedAt !== void 0 || !consent.allowedDomains.includes(assertion.domain)) return false;
+		if (!getSqliteDatabase().prepare("SELECT 1 FROM understanding_source_grants WHERE grant_id = ? AND status = 'active'").get(consent.grantId)) return false;
+	}
+	if (isXopcDatabaseOpen() && assertion.id) {
+		const db = getSqliteDatabase();
+		const evidence = db.prepare(`SELECT e.source_type, e.source_item_id, e.conversation_id, e.content_hash,
+      link.content_hash AS linked_hash FROM user_assertion_evidence link JOIN context_evidence e ON e.evidence_id = link.evidence_id
+      WHERE link.assertion_id = ? AND link.relation = 'supports'`).all(assertion.id);
+		if (assertion.createdBy === "connector" && (!assertion.consentReceiptId || !evidence.length)) return false;
+		for (const link of evidence) {
+			if (link.conversation_id) {
+				const session = getSessionMetadata(link.conversation_id);
+				if (!session?.routing || session.routing.peerKind !== "direct" || !isOwnerIdentity(session.routing)) return false;
+			}
+			if (link.source_type === "connector") {
+				if (!link.source_item_id || !link.linked_hash || link.linked_hash !== link.content_hash) return false;
+				const source = db.prepare("SELECT content_hash, deleted_at FROM knowledge_source_items WHERE item_id = ?").get(link.source_item_id);
+				if (!source || source.deleted_at || source.content_hash !== link.linked_hash) return false;
+			}
+		}
+	}
 	return (assertion.validFrom === void 0 || assertion.validFrom <= asOf) && (assertion.validTo === void 0 || assertion.validTo >= asOf) && (assertion.deleteAfter === void 0 || assertion.deleteAfter > asOf) && (assertion.reviewAt === void 0 || assertion.reviewAt > asOf) && (!context.use || !assertion.allowedUses || assertion.allowedUses.includes(context.use)) && (!assertion.allowedAgentIds || Boolean(context.agentId && assertion.allowedAgentIds.includes(context.agentId))) && assertion.sensitivity !== "secret" && assertion.sensitivity !== "regulated" && assertion.disclosurePolicy !== "ask_before_reference" && (assertion.status === "active" && assertion.authority === "user_explicit" || isWorkingAssumption(assertion));
 }
 //#endregion

package/dist/src/utils/logger/redact.js

@@ -62,8 +62,9 @@ var init_redact = __esmMin((() => {
 	KEEP_PREFIX_LENGTH = 6;
 	KEEP_SUFFIX_LENGTH = 4;
 	DEFAULT_REDACT_PATTERNS = [
+		/X-Xopc-Proof\s*[:=]\s*([A-Za-z0-9._-]+)/gi,
 		/\b[A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD)\b\s*[=:]\s*((?:\\?["'])?)([^\s"'\\]+)\1/gi,
-		/"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken|privateKey)"\s*:\s*"([^"]+)"/gi,
+		/"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken|privateKey|signature|x-xopc-proof)"\s*:\s*"([^"]+)"/gi,
 		/(?:__Host-xopc-session|xopc-local-session)=([A-Za-z0-9_-]{43})/g,
 		/Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)/gi,
 		/\b(sk-[A-Za-z0-9_-]{8,})\b/gi,
@@ -88,6 +89,8 @@ var init_redact = __esmMin((() => {
 		"cookie",
 		"set-cookie",
 		"signedpayload",
+		"signature",
+		"x-xopc-proof",
 		"credential",
 		"credentials"
 	]);

package/dist/src/voice/platform-streams.d.ts

@@ -1,5 +1,11 @@
 import type { StreamingSttOpenRequest, StreamingSttSession } from '../media-understanding/types.js';
 import type { SpeechSynthesisStreamResult } from './tts/speech-provider-types.js';
+export declare class PlatformVoiceError extends Error {
+    readonly status?: number;
+    readonly code?: string;
+    constructor(message: string, status?: number, code?: string);
+    get clientMessage(): string;
+}
 export declare function openPlatformStt(request: StreamingSttOpenRequest): Promise<StreamingSttSession>;
 export declare function openPlatformTts(request: {
     baseUrl: string;

package/dist/src/voice/platform-streams.js

@@ -1,6 +1,23 @@
 import WebSocket from "ws";
 //#region src/voice/platform-streams.ts
 const MAX_BUFFERED_BYTES = 512 * 1024;
+const MAX_ERROR_BODY_BYTES = 16 * 1024;
+var PlatformVoiceError = class extends Error {
+	constructor(message, status, code) {
+		super(message);
+		this.status = status;
+		this.code = code;
+		this.name = "PlatformVoiceError";
+	}
+	get clientMessage() {
+		if (this.code === "realtime_quota_session_limit") return "The funded transcription duration has been reached. Start a new voice session to continue.";
+		if (this.code === "realtime_quota_workspace_budget") return "XOPC Cloud voice workspace budget is exhausted. Increase the workspace budget or choose another voice provider.";
+		if (this.status === 402 || this.code === "realtime_quota_user_credits") return "XOPC Cloud voice has insufficient Credit or quota. Check your Cloud balance and workspace budget, or choose another voice provider.";
+		if (this.status === 401 || this.status === 403) return "XOPC Cloud voice authorization failed. Sign in again and check your access to this voice model.";
+		if (this.status === 429 || this.code?.startsWith("realtime_quota_")) return "XOPC Cloud voice quota or rate limit reached. Try again later or choose another voice provider.";
+		return "XOPC Cloud voice is unavailable. Try again later or choose another voice provider.";
+	}
+};
 function connect(url, token, signal, onEvent, onFailure) {
 	signal.throwIfAborted();
 	const socket = new WebSocket(url, {
@@ -30,15 +47,38 @@ function connect(url, token, signal, onEvent, onFailure) {
 			if (binary) throw new Error("Unexpected platform binary event");
 			const event = JSON.parse(raw.toString());
 			if (!event || typeof event.type !== "string") throw new Error("Invalid platform voice event");
-			if (event.type === "error") throw new Error(event.error?.message ?? "Platform voice failed");
+			if (event.type === "error") throw new PlatformVoiceError(event.error?.message ?? "Platform voice failed", void 0, event.error?.code);
 			onEvent(event);
 		} catch (error) {
 			fail(error instanceof Error ? error : /* @__PURE__ */ new Error("Invalid platform voice event"));
 		}
 	});
 	socket.on("unexpected-response", (_request, response) => {
-		response.resume();
-		fail(/* @__PURE__ */ new Error(`Platform voice rejected connection (${response.statusCode})`));
+		const fallback = `Platform voice rejected connection (${response.statusCode})`;
+		let bytes = 0;
+		const chunks = [];
+		const reject = () => {
+			let detail;
+			try {
+				detail = JSON.parse(Buffer.concat(chunks).toString("utf8"))?.error;
+			} catch {}
+			const code = typeof detail?.code === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(detail.code) ? detail.code : void 0;
+			const message = typeof detail?.message === "string" ? detail.message.slice(0, 1e3) : void 0;
+			fail(new PlatformVoiceError(`${fallback}${code ? `: ${code}` : ""}${message ? `: ${message}` : ""}`, response.statusCode, code));
+		};
+		response.on("data", (chunk) => {
+			bytes += chunk.length;
+			if (bytes > MAX_ERROR_BODY_BYTES) {
+				chunks.length = 0;
+				reject();
+				response.destroy();
+				return;
+			}
+			chunks.push(chunk);
+		});
+		response.once("end", reject);
+		response.once("error", reject);
+		response.once("aborted", reject);
 	});
 	socket.on("error", fail);
 	socket.on("close", () => fail(/* @__PURE__ */ new Error("Platform voice disconnected before completion")));
@@ -265,4 +305,4 @@ async function openPlatformTts(request) {
 	};
 }
 //#endregion
-export { openPlatformStt, openPlatformTts };
+export { PlatformVoiceError, openPlatformStt, openPlatformTts };